Agentic LLM Browsers Expose New Attack Surface for Prompt Injection and Data Theft

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Artificial intelligence is changing how people browse the internet. AI-powered browsers no longer just show web pages — they read content, take actions, and complete tasks for the user. These tools, called agentic LLM browsers, let users give simple commands …

FUNNULL-Linked Triad Nexus Resurfaces With 175+ Rotating CNAME Domains and Global Scam Portals

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A cybercriminal group tied to the FUNNULL Content Delivery Network has made a calculated return with a far more sophisticated and evasive infrastructure. Known as Triad Nexus, the group has rebuilt its global fraud operation following U.S. Treasury sanctions, deploying …

Windows BitLocker Vulnerability Allows Attacker to Bypass Security Feature

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft officially released security updates to address a significant vulnerability in Windows BitLocker. Tracked as CVE-2026-27913, this security feature bypass vulnerability was discovered by security researcher Alon Leviev in collaboration with the Microsoft STORM team. The flaw poses a substantial …

New JanaWare Ransomware Targets Turkish Users Through Customized Adwind RAT

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new ransomware family called JanaWare has begun targeting computer users in Turkey, relying on a customized version of the Adwind remote access trojan (RAT) to gain a foothold on victims’ systems. This campaign stands out because it combines a …

25,000+ Endpoints Exposed by Dragon Boss Solutions Update Domain Supply Chain Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

What started as a routine adware alert quickly turned into something far more serious. On the morning of March 22, 2026, security alerts began firing across multiple managed environments, all linked to software signed by a company called Dragon Boss …

OpenAI Launches GPT-5.4 with Reverse Engineering, Vulnerability and Malware Analysis Features

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenAI has unveiled GPT-5.4-Cyber, a specialized variant of its flagship GPT-5.4 model fine-tuned for advanced defensive cybersecurity workflows, granting vetted security professionals expanded access to capabilities such as binary reverse engineering, vulnerability scanning, and malware analysis, with fewer restrictions than …

Microsoft SharePoint Server 0-Day Vulnerability Actively Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical zero-day spoofing vulnerability in Microsoft SharePoint Server is being actively exploited in the wild, Microsoft confirmed on April 14, 2026, as part of its monthly security update cycle. Tracked as CVE-2026-32201, the flaw affects multiple versions of SharePoint …

Patch Tuesday, April 2026 Edition

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Microsoft today pushed software updates to fix a staggering 167 security vulnerabilities in its Windows operating systems and related software, including a SharePoint Server zero-day and a publicly disclosed weakness in Windows Defender dubbed “BlueHammer.” Separately, Google Chrome fixed its …

Security Risk Advisors Purple Team Participants Can Now Earn CPE Credits

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Philadelphia, United States / Pennsylvania, April 14th, 2026, CyberNewswire GIAC and ISC2 now recognize active participation in SRA Purple Team exercises as an eligible Continuing Professional Education (CPE) activity. Teams can earn CPE credits while strengthening organizational detection and response capabilities! How? Some CPE activities …

Fortinet Patches 11 Vulnerabilities Across FortiSandbox, FortiOS, FortiAnalyzer, and FortiManager

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Fortinet released a sweeping batch of security advisories on April 14, 2026, addressing 11 vulnerabilities spanning multiple product lines, including two rated Critical, two rated High, and seven rated Medium or Low. The disclosures affect FortiSandbox, FortiAnalyzer, FortiManager, FortiOS, FortiProxy, …